Package Health/champs-libres/wopi-bundle

champs-libres/wopi-bundle

Clear licensing, documentation, repository tests, and automated security scanning support adoption. The all-unpinned workflow actions and archived action add maintenance risk, while recent activity is limited.

Latest v1.0.0

Packagist

62%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has only one release, published 283 days after the first release date, so there is little release history to demonstrate sustained maintenance.

Repo commit activity

The repository had zero commits and zero active maintainers in the last three months. Although it was pushed in June 2026, this recent inactivity limits evidence of ongoing maintenance.

Repo issue activity

There were no new or closed issues or pull requests in the last month, while four issues and two pull requests remain open; this suggests limited recent project activity.

Security policy

The repository has no security policy. For a Symfony bundle implementing WOPI endpoints, this is a transparency gap for reporting and handling security issues.

Workflow audit

All 12 analyzed action references are unpinned, and the release workflow uses an archived action with high-confidence medium severity. There are no untrusted checkouts, script injections, or broad top-level write permissions.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
symfony/http-client Version ^6.4 \|\| ^7.3	—	—
symfony/security-core Version ^6.4 \|\| ^7.3	—	—
champs-libres/wopi-lib Version ^1 \|\| ^2	—	—
symfony/framework-bundle Version ^6.4 \|\| ^7.3	—	—
symfony/expression-language Version ^6.4 \|\| ^7.3	—	—